Title: 🔤Glossary
Course: "Our networks, our security" Digital Security with a Gender Perspective > Section: Introductory module

Amplification Attack

It is a type of attack in which an attacker takes advantage of a system to amplify the magnitude of data sent to a target, overloading its capacity and causing interruptions.

Backup

A copy of data that is kept to restore it in case of loss or damage.

Blockchain

A database that can be shared by a large number of users in a peer-to-peer manner, allowing information to be stored in an immutable and orderly manner.

Reference: Retamal, CD, Roig, JB, & Tapia, JLM (2017). Blockchain: foundations, applications, and relationship with other disruptive technologies.

Botnet

A group of computers or devices under the control of an attacker, used to perpetrate malicious activities against a victim, often through distributed denial-of-service (DDoS) attacks.

Brute Force Attacks

A method used by cybercriminals to try to gain access to systems or accounts by systematically trying all possible password or key combinations.

Cracking

The practice of illegally accessing systems to violate privacy, confidentiality, or damage information or physical media.

Cyberattacks

Any attempt to gain unauthorized access to a computer, system, or network with the intent to cause damage.

Cyberculture

The set of social, cultural, and ideological systems related to new technologies and their use for communication and staying informed.

Cybersecurity

Measures and tools designed to control and protect the computer security of an entity or virtual space.

DDoS

An attack in which multiple systems compromise a single target, causing a denial of service.

Digital Threats

Malicious activities in the digital environment, such as phishing, ransomware, or denial-of-service attacks.

Encryption

The process of converting data into an encrypted format to prevent unauthorized access.

Espionage (Spyware)

Malicious software designed to infiltrate a device and collect information about the user without their knowledge.

Firewall

Device or software that controls incoming and outgoing network traffic.

Free Software

Software that complies with the Four Essential Freedoms, ensuring users can run, study, redistribute, and modify the software.

Geofencing

Technology that uses geographic location to create virtual boundaries around a specific area.

Grooming

Actions by an adult to emotionally manipulate a minor for sexual abuse.

Hacker

A person who uses technical knowledge to solve problems, often with unauthorized system access.

IP

Protocol defining how data is sent and received over a network.

Information Technologies (TIC)

Practices, knowledge, and tools for the consumption and transmission of information, especially following the Internet's emergence.

Jailbreaking

The process of removing manufacturer-imposed restrictions on devices like mobile phones.

Keylogger

Software that records keystrokes on a keyboard.

Log

A file recording events occurring on a computer system, used for security monitoring and analysis.

Malware

Software installed without the user's consent, performing malicious actions such as stealing data.

Mitigation

Actions taken to reduce the severity or impact of a cyberattack.

NIDS

A system monitoring network traffic for suspicious activity.

OTP (One-Time Password)

A temporary password used for authentication.

Open Source Software

Software that allows users to audit and modify the code freely.

Patch

A software update designed to fix vulnerabilities and improve security.

Phishing

A social engineering attack that tricks users into sharing sensitive information.

Password

A form of authentication using secret information to control access.

Query

A request for information from a database or system.

Ransomware

Malicious code that prevents access to systems, demanding ransom for restoring functionality.

Rootkit

A set of software tools allowing attackers to maintain undetected access to a system.

Red Team

A group of security experts who simulate attacks to test an organization's defenses.

Sexting

Sharing sexually explicit content online, often leading to loss of control over its distribution.

Smishing

A phishing attack delivered via SMS.

Spam

Unsolicited bulk communication, often used for advertising, phishing, or spreading malware.

SSL (Secure Sockets Layer)

Encryption technology that protects information transmitted over the Internet.

Steganography

Hiding information within a file, image, or message to conceal its existence.

Trojan Virus

Malware disguised as legitimate software to trick users into installing it.

Threat

Any circumstance or event with the potential to cause harm to a system.

Trolls

Individuals who provoke or harass others online through offensive comments.

Update

Installing new software versions to fix vulnerabilities or improve security.

User

Permissions and resources assigned to an operator in a computer network.

Vishing

Obtaining information through fraudulent phone calls.

Vulnerability

A weakness in a system that can be exploited by attackers.

Worm

Malware that replicates itself to spread to other systems without user intervention.

XSS (Cross-Site Scripting)

A web vulnerability allowing attackers to inject malicious scripts into webpages.

Yara Rules

A set of patterns used to identify and classify malware.

Zombie

A device infected with malware, remotely controlled by an attacker.

Software

The ser of programs and instructions that enable computers and other electronic devices to perform specific tasks.

Hardware

Individuals with technical knowledge who analyze, troubleshoot, and report security vulnerabilities in systems, networks, and software. Some also develop techniques to improve security.

Denial of Service (DoS) Attack:

A cyberattack that floods a server with excessive requests, making it unavailable to legitimate users. A more advanced version, the Distributed Denial of Service (DDoS) Attack, uses multiple devices to launch the attack simultaneously.

AI-Driven Phishing and Social Engineering Attacks:

Cybercriminals are increasingly leveraging AI to enhance phishing campaigns. AI enables the creation of highly personalized and convincing emails by analyzing data from social media and other public sources, significantly increasing the likelihood of successful breaches.

Deepfake Technology for Misinformation and Fraud

powered by AI, deepfake technology allows attackers to create realistic audio and video content that impersonates trusted figures within an organization. These fabricated communications can be used to authorize fraudulent transactions or disseminate misinformation.

AI-Driven Automated Attacks:

AI can help attackers quickly identify weak spots in security systems, making it easier to break into networks without needing extensive technical skills. Instead of spending weeks searching for vulnerabilities manually, AI tools can scan and analyze systems in minutes, helping cybercriminals find easy entry points.

Algorithm

An algorithm is a set of step-by-step instructions used to solve a problem or complete a task. Think of it like a recipe for cooking—just as a recipe tells you what ingredients to use and how to mix them in the right order, an algorithm tells a computer how to process information and make decisions. For example:

- A set of instructions to solve a math problem (step 1: add two numbers, step 2: divide by 2).
- The way Google shows you search results (step 1: check keywords, step 2: rank the most relevant pages).

Computers use algorithms all the time to do things like sorting emails, recommending movies, or finding the fastest route on a map.

Spyware

A type of malicious software that infects a device and secretly and without consent records browsing data, personal information, device location, call logs, or messages, among other personal data.

Hacking

Use of techniques and procedures by a hacker to gain unauthorized access to other people's computer systems in order to manipulate them, obtain information, or for fun. Cracking is a practice related to hacking but involves accessing systems with criminal intent to violate the affected person’s privacy, breach information confidentiality, or damage information or physical media.